Bernstein: U.S. SMID-Cap Software — GitLab Finds a Sneaky Tailwind in Rising Code Attacks

Bernstein highlights an emerging security tailwind for GitLab (GTLB), emphasizing that its integrated CI/CD pipeline offers superior protection against software supply chain attacks compared to fragmented toolchains. Recent cyber incidents, including the compromise of Aqua Security's Trivy and LiteLLM which subsequently infected Checkmarx, Telnyx, and Mercor, underscore this growing vulnerability. The proliferation of open-source inputs and LLM-generated code suggestions has dramatically expanded the attack surface for developers relying on disconnected third-party tools. GitLab's unified platform approach mitigates these risks by reducing integration points and providing end-to-end visibility. The company is leveraging these threat dynamics as a key narrative in its sales strategy, though management notes that it remains early in the cycle for these specific vulnerabilities to directly catalyze large enterprise deals. Bernstein maintains an Outperform rating on GitLab with a $60 target price, implying roughly 164% upside from the current $22.76 share price. This valuation relies on an equal-weighted blend of discounted cash flow analysis, utilizing a 12% WACC and 3% terminal growth rate, alongside a forward price-to-sales multiple. The firm projects adjusted EPS of $0.96, $1.15, and $1.53 for fiscal years 2026 through 2028, supported by robust free cash flow generation.